$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5ada28a-9d6e-3168-bde1-28c31eddfeb1.roa File: b5ada28a-9d6e-3168-bde1-28c31eddfeb1.roa (raw, json) Hash identifier: Ivp505oJ/+kgv2dLrwuoADdS3OjMsPQurubZdlz3QfU= Subject key identifier: 37:F6:0D:8A:53:74:49:ED:43:F6:B7:5D:D8:22:5B:BA:20:8A:06:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6D2CF40DC8248DAADD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5ada28a-9d6e-3168-bde1-28c31eddfeb1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.20.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6d:2c:f4:0d:c8:24:8d:aa:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2f953663-b5e2-4b0a-a7fb-cef94197a8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:41:ae:bd:a1:9d:f9:80:77:94:40:88:60:1f: cc:07:f6:47:ce:eb:75:84:82:9a:ef:e9:64:13:de: 20:d8:3b:57:ef:dc:4d:af:37:bb:df:f9:e3:8a:0f: c6:d8:c7:85:94:43:d0:46:c1:24:7c:a1:69:04:cb: ef:ad:fc:02:d1:a4:4c:57:5f:3f:4b:22:71:7f:41: b5:eb:bc:0b:e5:b6:7e:02:8b:ef:ff:3a:14:06:8a: 67:21:2b:d7:2c:9d:b3:eb:5a:56:09:5b:1e:25:df: 8b:72:44:57:1c:6b:60:af:5e:00:8e:8a:18:ad:69: 28:87:77:be:95:08:90:87:ce:99:13:a4:88:bd:0a: 0e:7e:46:63:eb:79:e8:53:2a:02:58:58:1b:3c:c7: 46:53:bd:f8:9b:ee:96:2f:1c:22:62:4d:e5:ec:1e: 7f:f4:42:8c:9a:78:7e:3a:b0:ab:ef:60:eb:8c:8e: 91:bf:a0:20:07:15:70:82:d9:a8:58:c1:45:46:2b: d7:10:77:35:de:42:c5:ea:4e:8e:c9:93:a4:06:c4: 7c:80:a2:7d:fb:e2:66:8b:ed:9f:e3:b1:ad:5e:24: 2c:99:42:e1:01:73:53:90:37:51:3d:22:70:1a:03: d5:52:17:29:ca:b4:bd:af:9e:6d:6c:5d:a4:43:0f: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F6:0D:8A:53:74:49:ED:43:F6:B7:5D:D8:22:5B:BA:20:8A:06:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5ada28a-9d6e-3168-bde1-28c31eddfeb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:35:76:46:53:84:53:18:a4:43:99:fa:34:7f:58:fe:2d:1b: 2f:1b:4f:3c:bc:e2:1e:f6:b1:cc:57:71:76:92:7a:5d:bc:02: 33:ac:6f:4d:78:e6:45:1e:ee:29:17:28:af:45:cc:e6:cc:6d: 18:99:24:03:b5:f2:c2:cc:61:fc:3d:c2:06:9e:64:bb:9a:55: f3:d1:7b:f5:09:15:c2:05:6e:38:75:c4:9c:83:35:bd:5a:9d: 52:12:6f:45:4e:47:cd:0d:f0:cd:5d:63:3a:0a:78:73:89:c1: 89:26:6f:a4:64:1d:7f:cd:cb:b9:5a:11:72:9f:8c:1c:b8:41: 51:97:2c:13:27:7e:41:78:9d:2c:d1:54:b0:61:3b:45:a9:04: 39:08:7f:f1:f7:d8:3d:2c:ba:c5:08:08:e1:4b:27:41:9f:d2: 2b:91:c9:6c:6c:56:81:11:8b:3b:0b:cf:3e:6f:1d:af:c8:e3: b5:94:ab:97:05:db:ce:26:a4:91:79:08:fd:70:90:27:be:71: e1:88:fb:79:b7:7a:97:e0:20:f3:a9:9d:e0:2e:07:fb:3b:cc: 7a:6e:43:47:ae:58:ca:14:1b:47:0e:be:5d:a8:fe:b1:92:2c: 8d:13:49:1b:74:e0:49:97:33:e2:5a:14:8d:19:a5:96:cf:b3: 48:cd:06:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPW0s9A3IJI2q3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmY5NTM2NjMtYjVlMi00YjBhLWE3ZmItY2VmOTQxOTdhOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEGuvaGd+YB3lECIYB/MB/ZHzut1hIKa7+lk E94g2DtX79xNrze73/njig/G2MeFlEPQRsEkfKFpBMvvrfwC0aRMV18/SyJxf0G1 67wL5bZ+Aovv/zoUBopnISvXLJ2z61pWCVseJd+LckRXHGtgr14AjooYrWkoh3e+ lQiQh86ZE6SIvQoOfkZj63noUyoCWFgbPMdGU734m+6WLxwiYk3l7B5/9EKMmnh+ OrCr72DrjI6Rv6AgBxVwgtmoWMFFRivXEHc13kLF6k6OyZOkBsR8gKJ9++Jmi+2f 47GtXiQsmULhAXNTkDdRPSJwGgPVUhcpyrS9r55tbF2kQw9CCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf2DYpTdEntQ/a3XdgiW7ogigbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVhZGEyOGEtOWQ2ZS0z MTY4LWJkZTEtMjhjMzFlZGRmZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ1dkZThFMYpEOZ+jR/WP4tGy8bTzy84h72scxXcXaSel28AjOsb014 5kUe7ikXKK9FzObMbRiZJAO18sLMYfw9wgaeZLuaVfPRe/UJFcIFbjh1xJyDNb1a nVISb0VOR80N8M1dYzoKeHOJwYkmb6RkHX/Ny7laEXKfjBy4QVGXLBMnfkF4nSzR VLBhO0WpBDkIf/H32D0susUICOFLJ0Gf0iuRyWxsVoERizsLzz5vHa/I47WUq5cF 284mpJF5CP1wkCe+ceGI+3m3epfgIPOpneAuB/s7zHpuQ0euWMoUG0cOvl2o/rGS LI0TSRt04EmXM+JaFI0ZpZbPs0jNBo0= -----END CERTIFICATE-----Generated at Sun Oct 11 17:16:16 2026 by rpki-client